Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.mft
File:                     4-72W1UWm_HGaNKpYbla8vKIf90.mft (raw, json)
Hash identifier:          UG/ODEhFyowqLl3zAtztEwZJxbkHn6xbYAAFcdjj7Xw=
Subject key identifier:   A2:17:6D:84:C3:C7:9F:1D:94:5E:13:BB:EB:7A:B1:A5:9C:33:07:93
Authority key identifier: E3:EE:F6:5B:55:16:9B:F1:C6:68:D2:A9:61:B9:5A:F2:F2:88:7F:DD
Certificate issuer:       /CN=F36FE55FAF/serialNumber=E3EEF65B55169BF1C668D2A961B95AF2F2887FDD
Certificate serial:       5C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4-72W1UWm_HGaNKpYbla8vKIf90.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.mft
Manifest number:          5C
Signing time:             Fri 24 Jul 2026 05:36:08 +0000
Manifest this update:     Fri 24 Jul 2026 05:36:08 +0000
Manifest next update:     Sun 26 Jul 2026 05:36:08 +0000
Files and hashes:         1: 4-72W1UWm_HGaNKpYbla8vKIf90.crl (hash: eQY71yyCxwIwGHKA64nNKIXjs7avb6DkBViaVkg48Ok=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4-72W1UWm_HGaNKpYbla8vKIf90.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FE55FAF, serialNumber=E3EEF65B55169BF1C668D2A961B95AF2F2887FDD
        Validity
            Not Before: Jul 24 05:36:08 2026 GMT
            Not After : Jul 26 05:36:08 2026 GMT
        Subject: CN=6a62f9c8-461c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:16:57:4e:2e:1f:2c:65:ff:9e:b6:14:e1:04:
                    7a:8d:03:55:89:c5:4e:72:fc:c4:3b:f0:20:75:e0:
                    43:92:5b:51:a9:9c:af:31:4d:35:53:8a:ea:bc:bf:
                    d7:ed:2c:4c:9d:04:e5:2b:7a:9a:9f:78:ab:92:5b:
                    e7:ee:96:75:cf:8b:80:df:6b:51:64:c8:f0:02:17:
                    a9:88:39:58:54:ca:b7:1c:a2:19:a7:22:ce:00:de:
                    ee:f2:d1:b6:fd:2a:e4:04:a7:54:08:3b:12:73:c3:
                    6e:8c:25:89:22:11:89:79:4d:09:d2:eb:da:4e:e2:
                    ef:4f:87:11:6e:5d:e8:cc:93:c4:ea:a9:42:9c:30:
                    a7:04:6f:ba:c4:36:6a:8a:3e:25:d5:30:a6:a4:08:
                    99:98:9b:a8:e0:45:ea:88:7f:20:ac:d4:6d:2e:e8:
                    84:bf:1a:95:fa:ae:d8:8c:cd:40:17:e3:fe:b6:c3:
                    44:58:aa:43:73:c8:3d:84:c5:cd:4d:c6:f8:8f:e2:
                    ad:89:bb:c6:74:63:ec:18:85:01:4c:fb:e4:1a:2d:
                    69:90:f8:c7:fb:a1:4b:ff:db:02:77:83:bc:cb:9d:
                    71:ac:b7:40:20:49:01:36:5e:6c:2d:c9:10:7b:9d:
                    53:bb:8e:cb:93:5c:7f:6e:55:86:32:f0:c0:6e:ec:
                    a2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:17:6D:84:C3:C7:9F:1D:94:5E:13:BB:EB:7A:B1:A5:9C:33:07:93
            X509v3 Authority Key Identifier:
                keyid:E3:EE:F6:5B:55:16:9B:F1:C6:68:D2:A9:61:B9:5A:F2:F2:88:7F:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4-72W1UWm_HGaNKpYbla8vKIf90.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:48:ed:61:ed:06:18:a0:ee:cf:e2:78:8d:64:1d:b0:a8:a2:
         74:7f:17:74:4c:e2:01:8d:0f:a5:3d:6e:d9:d9:4d:9d:71:9c:
         62:03:a2:a8:62:e8:74:85:7d:27:bd:28:0a:a4:24:4a:43:e1:
         65:c4:95:3b:9d:64:d0:12:19:f6:2b:a7:8c:6e:d1:ee:10:58:
         f2:a6:9e:5e:eb:ef:97:46:0f:05:ca:7d:b7:c6:34:c1:93:ce:
         44:c1:57:60:ba:cd:4b:80:ac:ce:28:09:b2:7e:08:59:5c:1e:
         c2:21:25:ec:a4:4f:c4:1f:30:5a:5b:a0:0e:91:47:15:11:2a:
         a5:1b:1f:8f:05:f2:3e:33:78:c2:ac:2d:b5:54:2c:68:a4:89:
         f8:7a:e8:2c:1c:e8:fe:a7:ad:a4:59:0e:cf:cc:44:0e:b1:c5:
         e3:c7:e7:e5:c3:ac:c3:8c:c4:7d:5d:73:41:09:6a:be:b5:33:
         1d:29:89:a4:87:fb:f9:5e:2e:85:fa:45:15:5b:58:79:5e:bc:
         97:c8:74:a3:82:2f:0d:22:fa:fb:e2:aa:48:08:c2:b6:5a:eb:
         fa:cb:44:ed:27:46:6b:f8:b0:a1:93:9e:52:56:c4:6a:28:a9:
         ad:71:41:2b:dc:7f:5d:dc:03:8d:65:69:16:73:8d:50:94:09:
         e2:90:0e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:19 2026 by rpki-client